<question id="extra-named-port">

	  <para>My named is listening on port 53 and some other

	    high-numbered port?  Named is vulnerable a lot, have I

	    been hacked?</para>

	</question>

	<answer>

	  <para>No.  FreeBSD 3.0 and later use a version of named that

	    uses a random high-numbered port for outgoing queries.  If

	    you want to use port 53 for outgoing queries, either to

	    get past a firewall or to make yourself feel better, you

	    can use the following in

	    <filename>/etc/namedb/named.conf</filename>

	    <programlisting>

	      options {

	           query-source address * port 53;

	      };

	    </programlisting>

	  <para>You can replace the * with a single IP address if you

	    want to tighten things further.</para>

	  <para>Congratulations, by the way.  It's good practice to

	    read your <command>sockstat</command> output and notice

	    odd things.</para>

	</answer>

      </qandaentry>

      <qandaentry>